com.microej.crypto.internal.natives

Class X509CertSupportNatives

java.lang.Object

com.microej.crypto.internal.natives.X509CertSupportNatives

public class X509CertSupportNatives
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
static int	CERTIFICATE_EXCEPTION Return value used to signal an error while parsing a certificate
static int	INVALID_KEY_EXCEPTION Return value used to signal that the provided key is invalid in this context
static int	NO_SUCH_ALGORITHM_EXCEPTION Return value used to signal that an algorithm is no available on the target
static int	SIGNATURE_EXCEPTION Return value used to signal an invalid signature

Constructor Summary

Constructors

Constructor and Description
X509CertSupportNatives()

Method Summary

Modifier and Type	Method and Description
static int	appendCertToPath(int cpv, byte[] x509)
static int	appendTrustedCertificate(int cpv, byte[] x509)
static int	checkValidity(byte[] cert, int certLength) Checks that the certificate is currently valid, i.e.
static int	closeCertPathValidator(int cpv)
static boolean	expectForwardCertPath()
static int	getKeyData(byte[] cert, int certLen) Get X509 key from the encoded data
static int	getX500PrincipalData(byte[] cert, int certLen, byte[] principalData, int principalDataLength, boolean getIssuer) Extracts the subject or issuer X500Principal from an X509Certificate.
static int	nativeGetCloseKeyId() Gets the id of the native close function.
static int	newCertPathValidator()
static int	parse(byte[] cert, int off, int len) Parses the given certificate to validate it and returns its encoded format type.
static int	validateCertPath(int cpv)
static int	verify(byte[] cert, int certLength, int nativeId) Verify a public key

Methods inherited from class java.lang.Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CERTIFICATE_EXCEPTION

public static final int CERTIFICATE_EXCEPTION

Return value used to signal an error while parsing a certificate

See Also:

Constant Field Values

INVALID_KEY_EXCEPTION

public static final int INVALID_KEY_EXCEPTION

Return value used to signal that the provided key is invalid in this context

See Also:

Constant Field Values

NO_SUCH_ALGORITHM_EXCEPTION

public static final int NO_SUCH_ALGORITHM_EXCEPTION

Return value used to signal that an algorithm is no available on the target

See Also:

Constant Field Values

SIGNATURE_EXCEPTION

public static final int SIGNATURE_EXCEPTION

Return value used to signal an invalid signature

See Also:

Constant Field Values

Constructor Detail

X509CertSupportNatives

public X509CertSupportNatives()

Method Detail

appendCertToPath

public static int appendCertToPath(int cpv,
                                   byte[] x509)

appendTrustedCertificate

public static int appendTrustedCertificate(int cpv,
                                           byte[] x509)

checkValidity

public static int checkValidity(byte[] cert,
                                int certLength)
                         throws NativeException

Checks that the certificate is currently valid, i.e. the current time is within the specified validity period.

Parameters:

cert - the encoded certificate data

certLength - encoded data length

Returns:

SecurityErrorConstants.J_SEC_NO_ERROR on success, SecurityErrorConstants.J_X509_CERT_EXPIRED_ERROR if certificate expired, SecurityErrorConstants.J_X509_CERT_NOT_YET_VALID_ERROR if certificate is not yet valid

Throws:

NativeException - on error

closeCertPathValidator

public static int closeCertPathValidator(int cpv)

expectForwardCertPath

public static boolean expectForwardCertPath()

getKeyData

public static int getKeyData(byte[] cert,
                             int certLen)
                      throws NativeException

Get X509 key from the encoded data

Parameters:

cert - the encoded certificate data

certLen - encoded data length

Returns:

the resource native id.

Throws:

NativeException - on error.

getX500PrincipalData

public static int getX500PrincipalData(byte[] cert,
                                       int certLen,
                                       byte[] principalData,
                                       int principalDataLength,
                                       boolean getIssuer)
                                throws NativeException

Extracts the subject or issuer X500Principal from an X509Certificate.

Parameters:

cert - The certificate data encoded in X509

certLen - The certificate encoded data length

principalData - The principal data extracted from the certificate.

principalDataLength - The length of principal_data.

getIssuer - '1' to get the issuer, '0' to get the subject.

Returns:

The number of bytes copied into principalData.

Throws:

NativeException - on error.

nativeGetCloseKeyId

public static int nativeGetCloseKeyId()

Gets the id of the native close function.

Returns:

the id of the static native close function

Throws:

NativeException - on error

newCertPathValidator

public static int newCertPathValidator()

parse

public static int parse(byte[] cert,
                        int off,
                        int len)

Parses the given certificate to validate it and returns its encoded format type.

Parameters:

cert - the certificate buffer

off - the offset in the buffer at which the certificate content started

len - the certificate content length * @param retry true if this operation is called again when the previous call is not completed.

Returns:

the certificate encoded format type (0 if PEM format or 1 if DER format); SecurityErrorConstants.J_CERT_PARSE_ERROR if the certificate is not valid or an error occurs.

validateCertPath

public static int validateCertPath(int cpv)

verify

public static int verify(byte[] cert,
                         int certLength,
                         int nativeId)
                  throws NativeException

Verify a public key

Parameters:

cert - the encoded certificate data

certLength - encoded data length

nativeId - the native resource id. the native resource should be the public key to be verified

Returns:

0 on success, or one of SIGNATURE_EXCEPTION if the Signature is invalid, CERTIFICATE_EXCEPTION if an error happened while parsing the certificate, NO_SUCH_ALGORITHM_EXCEPTION if the signature algorithm is not available, INVALID_KEY_EXCEPTION if an error related to the key is detected.

Throws:

NativeException - on error